Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
badfbc4f87965348ad73bb7272b66cae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
badfbc4f87965348ad73bb7272b66cae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
badfbc4f87965348ad73bb7272b66cae_JaffaCakes118
Size
241KB
MD5
badfbc4f87965348ad73bb7272b66cae
SHA1
7a9f53e69ebafb271cf120230a8de937061a3615
SHA256
00ccaffdc366e4b94bfc31b59ee391307ac06c530b9f212e5fb3f9b1c4556049
SHA512
faba076df9ec186c2d72409e36874c8b3259a67eb81c30d627748ede120b1f1fcde166246c066c4a5421a3bf8889756130fed2458d4f9905f337139e28b33811
SSDEEP
6144:7keENDvTSn2SV/GuhYdViC7X57+nMWNQE91YSxFsLh:7NEND/k/GLPX57+nIETYi0h
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ